Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier: KLE+mEKZFsLnhdUdtmvKKpL3TgtmS1KCQDyS9DRBKcs=
Subject key identifier: 10:62:71:EC:94:59:5C:48:0B:0F:65:75:6A:E1:A5:6A:23:21:DB:0E
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial: 0198914840AE549DF36696683FDC6036745C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 00:01:28 +0000
Manifest this update: Sun 10 Aug 2025 00:01:28 +0000
Manifest next update: Mon 11 Aug 2025 00:01:28 +0000
Files and hashes: 1: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (hash: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=)
2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: dnAXvBIAIL20oZzxPYc6LeW1URlqWOrH8fr+RBtiBiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:48:40:ae:54:9d:f3:66:96:68:3f:dc:60:36:74:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Validity
Not Before: Aug 10 00:01:28 2025 GMT
Not After : Aug 11 00:01:28 2025 GMT
Subject: CN=106271ec94595c480b0f65756ae1a56a2321db0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:ef:4d:89:2e:10:c8:07:c9:07:56:37:e2:
c7:df:cc:91:53:4b:3a:01:51:7a:b3:dd:cf:25:9c:
c1:6f:73:74:89:37:09:6a:fc:a0:c2:35:8a:03:06:
ca:f9:b9:2a:e8:ba:7a:14:cc:a8:3a:99:dc:84:bd:
31:eb:12:56:4f:71:0f:5f:31:b1:a3:da:1c:79:30:
9d:6c:4f:35:06:88:9a:9b:dd:a5:8a:3f:15:54:05:
98:90:9f:24:e3:53:ca:76:23:be:8f:13:0f:f6:9b:
5f:99:86:24:a7:07:a4:e7:6e:56:b1:c1:d3:a4:01:
78:af:d2:b4:df:3e:6d:b0:c5:8e:dc:5f:d7:0f:1e:
91:99:4e:00:9e:1c:6e:4c:6b:e6:61:05:3d:f8:09:
72:1f:35:f8:cc:c0:99:87:71:49:00:06:ae:66:9e:
11:fd:b4:2d:d6:d5:ab:58:3a:b4:c4:ae:c2:34:4c:
5b:62:25:9e:5e:77:36:f0:28:44:c8:c1:89:0a:f2:
13:4e:d1:f0:86:b5:ec:02:ee:94:6b:bf:e0:3f:4a:
42:55:1a:df:b7:60:86:93:29:fd:50:2d:45:be:c6:
92:e9:12:d7:da:d7:ee:26:92:8a:f0:48:4d:95:e1:
7c:4a:3e:c4:71:a8:e5:9c:1f:8b:e1:aa:9a:00:22:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:62:71:EC:94:59:5C:48:0B:0F:65:75:6A:E1:A5:6A:23:21:DB:0E
X509v3 Authority Key Identifier:
keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1a:38:d6:cf:5f:f9:33:57:1c:39:60:88:b3:f3:86:a1:f9:
8a:bd:a0:1d:26:77:ad:e8:cb:56:ae:e0:84:0c:d8:27:55:30:
88:a6:20:7c:14:e0:00:d3:a5:bf:72:9f:dc:ba:75:6f:b1:9b:
e6:d3:15:3f:2c:7d:e2:81:9e:83:5d:d8:b0:59:af:8f:45:1e:
74:29:43:ee:e0:55:ff:4e:74:50:6d:a0:c5:d2:1f:32:27:15:
32:f3:6f:c6:95:17:f1:81:1f:41:98:03:e9:7a:e5:68:85:82:
7f:e5:cb:51:e7:5f:a5:3e:9a:06:9d:97:48:07:6e:2c:dd:32:
8d:40:39:2c:4e:a0:68:48:e0:29:bd:a5:dc:3e:e6:32:80:db:
83:26:be:36:fa:ac:2f:c1:ff:5f:15:e9:70:9d:fe:69:8e:8d:
c4:1d:74:fa:a9:70:60:58:8f:73:6b:0a:64:6e:7a:33:fb:cb:
bb:bf:60:e5:ba:0e:dc:1a:e9:6e:75:fc:1a:67:a6:71:57:d5:
39:72:85:7d:1b:09:8b:5b:f3:a8:47:51:66:28:c6:1f:b4:c8:
fa:9b:2f:75:f2:0e:a7:46:56:27:76:25:4b:b0:a4:36:17:68:
d5:ef:eb:e2:be:e6:75:42:5e:46:14:c0:fa:69:f3:a2:16:d0:
26:d8:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:50:20 2025 by rpki-client